https://github.com/jsa2/legacyauth
https://github.com/jsa2/legacyauth
Last synced: about 1 year ago
JSON representation
- Host: GitHub
- URL: https://github.com/jsa2/legacyauth
- Owner: jsa2
- License: mit
- Created: 2022-02-02T07:50:02.000Z (over 4 years ago)
- Default Branch: public
- Last Pushed: 2022-02-02T10:08:23.000Z (over 4 years ago)
- Last Synced: 2025-01-21T07:27:16.506Z (over 1 year ago)
- Language: JavaScript
- Size: 11.7 KB
- Stars: 2
- Watchers: 2
- Forks: 1
- Open Issues: 0
-
Metadata Files:
- Readme: readme.md
- License: LICENSE
Awesome Lists containing this project
README
## Azure AD Legacy Auth CLI test client for Azure AD Security Assessments
Determine if Conditional Access is configured properly. This tool is alternative solution to [MS Test Connectivity](https://testconnectivity.microsoft.com/tests/o365)
## License
[READ HERE](https://github.com/jsa2/legacyAuth/blob/public/LICENSE)
---
⚠ Only use this tool if you know what you are doing
⚠ Always test the tool first in test environments, with non-sensitive data
---
### Endpoints
Legacy SOAP endpoints|detail
-|-
✅ [connectMsOnline](src/msoid.js)| simulates connect-msolService CMDLET
**Application** Microsoft Online Syndication Partner Portal
**Application ID** d176f6e7-38e5-40c9-8a78-3998aab820e7
✅ [connectSPO](src/spo.js)| simulates legacy SPO access
**Application** Office 365 SharePoint Online
**Application ID** 00000003-0000-0ff1-ce00-000000000000
✅ [connectEWS](src/exo.js)| simulates legacy EWS access
**Client app** Exchange Web Services
### Running the tool
⚠️ While this tool does not store passwords (passwords are only retained in runtime) the recommendation is not to use privileged credentials. Always use read-only account, that is recommendation for any assessment use scenario
**Install**
- Use Azure Cloud Shell (BASH), or WSL (Cloud Shell is prefered)
```sh
curl -o- https://raw.githubusercontent.com/jsa2/legacyAuth/public/remote.sh | bash
```
**Running**
```sh
cd legacyAuth
node main.js --u=admin@M365B322999.onmicrosoft.com --p='DemoPasswordToEmptyTenant!.1'
```
### Reviewing logs
Authentication attempts are shown in non-interactive Azure AD logs
